RDP client cannot connect to RDS CB / GW - RDWeb works

January 28, 2020, 4:42 am

≫ Next: COM Port Redirect not functioning

≪ Previous: Win 10 1903-1909 RDP (Remote Desktop) not retaining window/taskbar positions on reconnect (multiple monitors)

Hi all,

Today i decided to try Microsoft RDS on server 2019. my normal user can get the session based desktop via https://RDSCB/RDWeb but if i try to open RDP client and point to RDSCB.Domain.Lan then i get'The connection was denied because the user account is not authorized for remote login'

Now i have not added the security group "DOMAIN\RDS Users" to any local groups on the RDS servers. not sure if thats required or not.

Hoping someone can tell me if i should be able to just open RDP client and connect or if thats not possible. not sure what could be wrong.

Followed this guide, although i have 2 servers https://www.slashadmin.co.uk/how-to-setup-a-single-server-rds-deployment-using-server-2016/

↧

COM Port Redirect not functioning

January 31, 2020, 12:35 am

≫ Next: RDS external gateway certificate issue identity cannot be verified

≪ Previous: RDP client cannot connect to RDS CB / GW - RDWeb works

COM Port redirection does not seem to work on Server 2016 when using RD Connection Broker. All the other redirects do work.

In the Group policies on the domain. "Do no allow COM port redirection" is set to disabled.
The ClientDeviceRedirectionOptions in the session collection show ComPort being enabled.
Also the redirectcomports:i:1 is present in the .rdp file.

On another machine, based on the same VM,which does not have the RD connection Broker role configured the COM Port redirection works flawlessly.

I would like to understand why COM port redirection does not work on the first system. What can i do to diagnose the issue and get it running?

↧

RDS external gateway certificate issue identity cannot be verified

February 3, 2020, 2:41 am

≫ Next: Windows Server 2019 RDS - RDP connection to different collections not working

≪ Previous: COM Port Redirect not functioning

Hello,

First of all im sorry for my bad english

I need help with rds gateway certificate, actualy i have this lab:

- Domain controller with CA providing trusted certificates (every server has its own personal cert)

- RDbroker + cal: rdb.abc.com

- RDgateway + web access: rdg.abc.com

- RDHost: rdh1.abc.com operating behind dns farm.abc.com for future load balancing (it is configured on gateway allowed resources)

- External gateway address is gate.abc.com (on hosting provider dns is set on my public ip)

Inside rdbroker > rds > implementation properties > certificates i have this setup:

- RD Connection Broker Enable Sync: cert of rdb.abc.com

- RD Connection Broker Publishing: cert of rdb.abc.com

- RD Web Access: cert of rdg.abc.com

- RD Gateway: rdg.abc.com (it is not the cert of gate.abc.com) <---- the problem i think is here

No matter wich cert i use, in case of rdg.abc.com

- connecting from exterior says identity of gateway server gate.abc.com mismatch with provided rdg.abc.com

In case of self signed cert gate.abc.com

- error says that server cannot be trusted...and cant download cert and upload into client certified authorities

I cant setup a gateway server called gate.abc.com and generate a cert to it becose in the future i need to add a gateway farm for HA

I dont know where is the problem...please help

Thank you very much!!

↧

Windows Server 2019 RDS - RDP connection to different collections not working

January 29, 2020, 4:36 am

≫ Next: Windows 2019 - RDP TLS Version used by default

≪ Previous: RDS external gateway certificate issue identity cannot be verified

Hi.

I'm implementing a new RDS farm with Windows Server 2019.

I have this servers deployed.

* 1 -RD Web Access

* 1 -RD Broker

* 3- RD Host Sessions

* 2 -Collections

* Collection cDEP1 ---> RDSH 1,2 --> Users/Group of DEP1

* Collection cDEP2 ---> RDSH 3 --> Users/Group of DEP2

I have 2 different departments in the company, DEP1 and DEP2

2 Department users have rights to logon vía RDP on 3 RDSH servers, I do this because in the future the RDSH hosts can be moved between Collections.

I want the users can connect to the services through RDP client and depends if the user or group belongs to DEP1 or DEP2 department, apply the collection cDEP1 or cDEP2 and then connect to his RDSH host.

I have tried this environment and I get two results.

* If I connect with browser https://RDWA/RDweb depends of the user I can see the published Apps and works fine.

* If I connect with the RDP client whit this configuration file and User belongs to DEP1, the connection opens on any of the servers. The same if I start session with user belongs to DEP2 group.

full address:s:RDCB01.DOM.NET
workspace id:s:RDCB01.DOM.net
use redirection server name:i:1
loadbalanceinfo:s:tsv://MS Terminal Services Plugin.1.cDEP1

loadbalanceinfo:s:tsv://MS Terminal Services Plugin.1.cDEP2

It seems that the broker does not redirect the connections based on the user's membership in the collection.

I don't know if this behavior is normal or this idea I have is not supported.
I would appreciate if someone could clarify something about this installation

Thanks

↧

Windows 2019 - RDP TLS Version used by default

January 28, 2020, 8:08 pm

≫ Next: Could not create template VHD. Error Message:-2147024893. Unable to retrieve the details of the virtual desktop collection.

≪ Previous: Windows Server 2019 RDS - RDP connection to different collections not working

Hi

I was going to disable server TLS v1.0 on my Windows 2019 using IISCrypto by the creator Nartac Software it's a very simple/easy tool & used it many times.

(This stops Server from accepting TLS v1.0 requests so no IIS website requests etc)

My question by default does Windows 2019 RDP sessions use TLS v1.0, v1.1 or v1.2?

(When using Wire Shark it appears to be using TLS v1.2 but thought I would get confirmation)

Thanks

↧

Could not create template VHD. Error Message:-2147024893. Unable to retrieve the details of the virtual desktop collection.

January 26, 2020, 8:28 pm

≫ Next: Users getting kicked off

≪ Previous: Windows 2019 - RDP TLS Version used by default

Can someone help me on this issue? I tried to indicate all the possible set up to parallel it on same on win7 collection but no success. Below are the result after creating collection.

We have check the follwing :

Profile Disk : F:\\VDI06\ProfileDisk_New

CSV path : C:\ClusterStorage\Volume2\VDI_Disk

Parent Disk : C::\ClusterStorage\Volume2\VDI_Parent

All Permission on the file server folder.

Homer Sibayan

↧

Users getting kicked off

January 22, 2020, 2:45 pm

≫ Next: How to enable User Input Delay per Process on windows 2016

≪ Previous: Could not create template VHD. Error Message:-2147024893. Unable to retrieve the details of the virtual desktop collection.

We have an RDS farm at our main office and a bunch of branch offices that connect to it. A few users at one of the branch offices has said it kicks them off from time to time. It doesn't log them out, just brings them back to the login screen. We are using Dell Wyse 3040 terminals.

My guess is this happens due to a short internet outage as this office doesn't have the greatest internet. Is it possible to extend the timeout per say?

Thank you

↧

How to enable User Input Delay per Process on windows 2016

January 21, 2020, 3:49 am

≫ Next: issue rds farm broker

≪ Previous: Users getting kicked off

Hello,I am having problems to diagnose is poor application performance—the applications are running very slow. After following this link: https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-rdsh-performance-counters#download-windows-server-insider-software.

Could not find an option to enable this.

How would I enable User Input Delay per Process or User Input Delay per Session on windows 2016 server?

Or this there anything similar that i could use if this is not compatible with windows 2016

Thanks

↧

issue rds farm broker

January 21, 2020, 1:54 am

≫ Next: Migrate Profile Disk to other User / Domain

≪ Previous: How to enable User Input Delay per Process on windows 2016

Hello All,

We have big issues with our customer.

The environment is an rds 2016 farm with 1 broker and a gateway and 20 rds windows server 2016 and a remote server for remore login.

For our production collection we encounter serieus issues since the 8th of January 2020.

The thing is we have 20 rds windows server 2016 servers with 6 core per socket and 1 virtual socket 24 gb ram.

The broker normally devides the sessions per server but for some kind of reason we see that on the broker 1 user is logged into a server.

However when i log in on the server directly there are 30 users logged and then then server become unstable.

Every morning this is happening now and it is not every time the same server.

we set the server with too many connections to false and then restart the broker and then try to log of the users and dismount there profile disk so they can log in on a different server.

What we also see is the proces termsvc is 98%!!

Does someone know what is causing this issue we did not do any changes to the server and it worked always perfectly.

We have approximately 328 users devided over 21 rds server ( this is included the remote server.

↧

Migrate Profile Disk to other User / Domain

January 17, 2020, 3:17 am

≫ Next: How to license software on a RDS 2016 2 session host farm

≪ Previous: issue rds farm broker

We are migrating our Session Host to a new domain. But in the new domain users obviously gets a new username and SID.

Are there any way we can connect the old User Profile Disk to the new user?

Thank you.

↧

How to license software on a RDS 2016 2 session host farm

January 24, 2020, 8:44 am

≫ Next: RDWeb - password change not working with cross forest trust - 2012r2

≪ Previous: Migrate Profile Disk to other User / Domain

I have built a Server 2016 RDS Farm (25 user cals spread over the 2 hosts) containing 2 session hosts, and now at the stage of installing software on each (both will have exactly the same software installed so they mirror each other)

For the following software below, how would i license the following

Visio

Project

Visual Studio

Would i need to buy 25 volume licenses for each software product so to cover the possibility of all 25 user cals being used.

↧

RDWeb - password change not working with cross forest trust - 2012r2

April 16, 2014, 1:47 pm

≫ Next: Licensing Issue and RD Licensing Diagnoser Information

≪ Previous: How to license software on a RDS 2016 2 session host farm

Hello Everyone,

I have a RDS implementation working with 2012r2 in a domain A.
Users from domain B (With an external two-way non-transitive trust with A) can access, log-in, use remoteapps, rds sessions, etc..

The problem is when I enable the RDWeb password reset feature. For example, taking 2 users with the "User must change password at next logon" option enabled:
If the user is from domain A, I get prompted to change the password and it works great.
If the user is from domain B, I get prompted to change the password, but after writing the new password it says that the user name or password is not valid.

Any clues?

I found this issue that I don't know if it's somehow related
http://social.technet.microsoft.com/Forums/en-US/cf14fc3e-2a4a-4f4e-8dd6-fed2ecdf7d7b/cross-forest-password-reset?forum=ilm2

Thanks

↧

Licensing Issue and RD Licensing Diagnoser Information

January 29, 2020, 12:57 pm

≫ Next: remote sign in

≪ Previous: RDWeb - password change not working with cross forest trust - 2012r2

I have an error and I'm trying to install new keys/license.

The Remote Desktop Session Host server is in Per Device licensing mode and No Redirector Mode, but license server 123server.***.local does not have any installed licenses with the following attributes:
Product version: Windows Server 2016
Licensing mode: Per Device
License type: RDS CALs or VDI Premium Suite licenses

and I've been given a bunch of 25 digit keys that the IT Company Purchased. They tell me they have tried to input them and they won't install. The Install licenses wizard has 7 Fields to Enter Groups of info. My keys are in 5 Groups. Example: AB123 CD123 EF123 GH123 IJ456

Server1 is Windows 2012, Server 2 that I'm wanting to install these licenses to is Server 2016.

↧

remote sign in

January 23, 2020, 11:16 am

≫ Next: Windows server 2008 R2 RDS upgrade to Windows Server 2012 R2 - Upgrade path

≪ Previous: Licensing Issue and RD Licensing Diagnoser Information

how do I allow family members to sign in to a pc remotely, when they've been put into 'cant sign in'.

↧

Windows server 2008 R2 RDS upgrade to Windows Server 2012 R2 - Upgrade path

January 23, 2020, 7:45 am

≫ Next: Windows Server 2019 RDS Errors After Domain Controller Change

≪ Previous: remote sign in

Hi Team,

We are working to upgrade many servers that's running partial and all RDS services that's running on Windows server 2008 R2 to Windows server 2012 R2. The in-place upgrade has many issues. We tried -

1. Uninstalling RDS roles , upgrade to 2012 r2 and later tried installing RDS role, ran into issues as role installation fails with errors codes which we are working with MS support and dont see success with action plans provided

Post reviewing many best practices, I see Microsoft suggest few roles which can support in-place upgrade vs migration options to windows 2012 R2

Would like to know whats the best approach on upgrading windows 2008 R2 servers running RDS services to Windows server 2012 R2

↧

Windows Server 2019 RDS Errors After Domain Controller Change

February 3, 2020, 9:45 am

≫ Next: RemoteApp RDS2019 - splash screens stuck on client

≪ Previous: Windows server 2008 R2 RDS upgrade to Windows Server 2012 R2 - Upgrade path

We had an existing Windows Server 2019 with Remote Desktop Services connected to a Windows Small Business Server 2011 that was acting as a domain controller. Everything worked fine.

The SBS 2011 was recently replaced by a new Windows Server 2019 domain controller. The new domain controller has the same name an IP address, so the old domain controller (SBS 2011) was removed, and the new one put in its place (Windows Server 2019) We rebuilt the trust relationship between the existing RDS server and the new domain controller by running the PowerShell command on the new RDS server

Reset-ComputerMachinePassword -Server {server name} -Credential {domain\Administrator}

That worked fine for connecting the RDS to the new domain server. However, when users try to login to the RDS Server using Remote Desktop, they get the error:

"The requested session access is denied".

The server manager on the RDS Server reports the following errors when a user tries to login to the RDS Server using Remote Desktop.

Error # 1280 Source: Microsoft Windows Terminal Services SessionBroker Client: :: Remote Desktop Services failed to join the Connection Broker on server SERVERNNAME.domain.local. Error: Current async message was dropped by async dispatcher, because there is a new message which will override the current one.

Error # 2056 Microsoft Windows Terminal Services Session Broker :::

The Remote Desktop Connection Broker server could not enumerate the targets for the provider named NULL from the database.

Pooled virtual desktop collection name: NULL Error: Logon to the database failed.

Error #226 Microsoft Windows TerminalServices ClientActiveXCore ::: RDPClient_SSL: An error was encountered when transitioning from TsSslStateDisconnected to TsSslStateDisconnected in response to TsSslEventInvalidState (error code 0x8000FFFF).

I researched these error codes but did not get too far. Any help would be appreciated.

Michael

↧

RemoteApp RDS2019 - splash screens stuck on client

February 7, 2019, 11:12 am

≫ Next: Diagnoser shows Host Server Version Server 2016 When Running 2019

≪ Previous: Windows Server 2019 RDS Errors After Domain Controller Change

Hi!

I am testing RDS 2019 with RemoteApp, and I have problems with startup splash screens. Each splash screen creates a button on the client’s taskbar and does not disappear from desktop and taskbar after the appearance of the main window. For example, I run three RemoteApp and I have three splash screens and three program windows on my desktop. And even if I close these windows, the splash screens will still remain on desktop and cannot be closed. This happens only in RemoteApp and does not occur with a remote desktop mode. I tried to recreate an RDS farm again, but it does not help.

This does not happen with all programs (having splash screen), but with many. At the same time, there were no such problems at RDS 2012R2/2016.

As RDCB and RDSH used Windows Server 2019 with latest cumulative update (2019-01). As clients used Windows 10 1709/1809 with same update.

↧

Diagnoser shows Host Server Version Server 2016 When Running 2019

March 19, 2019, 12:30 pm

≫ Next: Profile drives not reliably releasing on logout, causing users to have no profile next log in.

≪ Previous: RemoteApp RDS2019 - splash screens stuck on client

When I originally Activated the server licensing via Licenses Wizard using our schools Enrollment ID I may have used an older Enrollment ID number.

I think maybe that was the issue. All I know is when I when into the RD licensing Diagnoser it showed that the Remote Desktop Version Host Server Version is: Windows Server 2016.

... AND I AM RUNNING WINDOWS 2019 ...

After trying everything i know DE-activating, then re-activating with a more current Enrollment ID for our high school. Did not change anything.

So, removed ALL the remote desktop services and then reinstalled and reactivated. Still did nothing to change the information in the Diagnoser.

The information still shows in the Diagnoser: Windows Server 2016

HOW CAN I GET RID OF THIS PROBLEM?

Thanks,

Dave

↧

Profile drives not reliably releasing on logout, causing users to have no profile next log in.

February 3, 2020, 10:28 pm

≫ Next: user profile disk rds 2016

≪ Previous: Diagnoser shows Host Server Version Server 2016 When Running 2019

We migrated to a Server 2016 based RD system a while back and in increasing frequency, users who log off or time out when they disconnect (it happens in both cases, possibly more so in the latter) don't have their profile accessible.

Using the "Sidder" app I can see that the users profile .vhdx file is locked and appears in use on one of the RD hosts, but the user is not logged in when viewing directly on the server or via the RD broker server.

By closing the open files on the profile drive server that stores those profiles, the user can usually then log in, but in some cases - if they get the same server they used last in the RD host pool - that server still refuses to load the profile, and I have to manually shut down logins on that server to steer them to another host, where their profile finally attaches.

This is, obviously, making my users furious. This kind of song and dance to log in when they go to do work is not appreciated, nor does our IT people enjoy the wasted time troubleshooting this stuff.

Does anyone have any suggestions on what could be causing this unreliability? Is the only answer really to get a third party profile management system to fix this into a usable state? We tried classic roaming profiles on an earlier generation system and had all the fun roaming profile problems so going back in time is not an option.

↧